□□□□□□□□□□□□□□□□□□□□□□□□□□ DD 
D I/O D D D D D D D D I/ODD 



□ □□□□□□□□□ i/o □□□□□□□□□□□□□□ 

OSDDDDDDD 1DDDDDDDDDDDDDDDDDDDDDDDDD (DDDDDD I/O) 0 D D D 
DDDDDDDDOSDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDOSDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

l/ODDDDDDDDDDDDDDDDDDDDD 

OSDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDD (DDDDDDDD)DDDDDDDDDDDDDDDDDDDDDDDDDDD 
OSDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD HDD D D D D D 
D D D D DD LAN DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDD DMA DDDDDDDDD^DDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDD 

DDDD- DDDDDDDDDDDD 

unsigned char read_coml (void) { 

while ((read_reg_byte(COMl_LSR) & 1) == 0); 
return read_reg_byte (C0M1_RBR) ; 

> 

DDD 1DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD Line Status 



#1 □ □ □ □ □ OSDDDDDDDDDDDDDDDDDDDDDDDDD DDD DMA D CPU DDDDDDDDDDDDDDD 
CPU DDDDDDDDDDDDDDDDDDDDDDD 
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Register q Data Available DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
D D Receiver Buffer Register DDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD Line Status 
Register DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD CPU 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDD Data Available DDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDD 1DDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDD 

l/ODD □□ I/O □□□□□□□□ I/O 

DDDDDDDDDDDDDDDDDDDDD (DDDDDD I/O) DDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDI/ODDDD I/ODDDDDDDD I/O DDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDD x86DDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDD 

I/O D D D D I/O DDDDDDDDDDDDDDDDDDDDDDDDDDD (I/O DD)DDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD I/O DDDDDDDDD 
(IN D D D OUT DD)DDDDDDDD DDDDDDDDDDDDDDDDDDDDDD read_reg_byte() 
DDDDDDDDDDDDDDD 2DDDDDDDDD 

DDD 21/ODDDD l/ODD read_reg_byte() DDDDDDDDDDDD 

#define C0M1_P0RT (0x3f8) 
#define C0M1_LSR (C0M1_P0RT + 0) 
#define C0M1_RBR (C0M1_P0RT + 5) 

unsigned char read_reg_byte (unsigned short port) { 
unsigned char val; 

asm volatile ("inb 7,1, 7.0" : "=a"(val) : "Nd"(port)); 
return val; 

> 

DDDDDDDDDD I/O DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDD MOV DDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDD read_reg_byte() DDDDDDDDDDDDDDD 3DDDDDDDDD 
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DDD 3DDDD I/O D D read_reg_byte() DDDDDDDDDDDD 

#define C0M1_P0RT (0x40100000) 
#define C0M1_LSR ((void *) (C0M1_P0RT + 0)) 
#define C0M1_RBR ((void *) (C0M1_P0RT + 5)) 
unsigned char read_reg_byte (void *addr) { 
return *((unsigned char *)addr); 

> 

DDDDDDDDDDDDDDDDDDDDDDDDDD 2DDDDD I/O DDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDD 

VT-x □ □ D D I/O □□□□□□□□□□□□□□□□ 

D D l D D D D VT-xD DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDI/ODDDDDDDDD DDDDDD 

l- [DDD]DDDDDDDDDDDDD I/O DDDDDD 

2. [DDD ]I/0 D D D D D D D VMExit D D 

3. [DDDDDDD]DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
D D 

4. [DDDDDDD]DDDD I/O DDDDDDDDDDDDDD 

5. [D D D D D D D ]VMEnter DDDDDDDDDDD 

6. [DDD ]I/0 DDDDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD1DDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDD 

VT-x □ □ D D I/O D D □ □ I/O □□□□□□□□□ 

VT-x DDDD I/ODDDD I/O DDDDDDDDDDDDDD VMCS DDDDDDD I/O DDDDDD 
D D D D D VMExit DDDDDDDDDDDDD (VMCS DDDDDDDD 1 D D D 2DDDDDDDDD 
D D )D 

DDDD 2DDDDDDDDDD I/ODDDDDDDDDD VMExit DDDDDDDDDDDDD I/O D D 
DDDDDDDDDD VMExit DDDDDDDDDDDDDDD I/ODDDDDDDDDD VMExit DDD 
DDDDDD VMCS D VM-Execution Control Fields D Unconditional I/O exiting D 1DDDDDD DD 
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DDD I/O DDDDDDDDDDDD VMExit DDDDDDDDD VMCS Q VM-Execution Control Fields 
D Use I/O bitmaps Q 1 D D D D VM-Execution Control Fields Q I/O-Bitmap Address A Q I/O-Bitmap 
Address B Q I/O-bitmap A Q I/O-bitmap BQDDDDDDDDDDD I/O-bitmap B Q I/O Q D D D D 
8000H D D FFFFH DDDDDDDDDDDDDD (D 1)0 



I/O-bitmap 
Address B 

I/O-bitmap 
Address A 

VMCS 






FFFFh 




l/O-bitmap 
B 








8000h 


I/O 
Address 
space 




7FFFh 


I/O-bitmap 
A 


OOOOh 





D 1 I/O-bitmap D I/O D D D D D D 



DDDDDDD I/ODDDDDD VMExit DDDDDDDDD OS DDDDDDDDDDDD I/O DDD 

DDDDDDDDDD VMExit Reason 30 (I/O Instruction) D VMExit DDDDDDD Exit DDD VMCS 
D VM-Exit Information Fields D Exit reason DDDDDDDDDDDDDDDDDDDDDDDDDDD 
Exit DDDDDDDDDDDDDDDDDDDDDDDDDDDDDI/ODDDDDDDDDDDDDDD 
DDD Exit DDDDDDDDD I/ODDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD VM-Exit Information Fields q Exit 
qualification DDDDDDDDDDDD (D 1)D 



DDDDDDDD 


D D 


2:00 


DDDDDDD (0 = lbyteD 1 = 2byteD 3 = 4byte) 


3 


DDDDDD (0 = DDDDD1 = DDDD) 


4 


String D D (0 = D stringQ 1 = string) 


5 


REP DDDDDDD (0 = REP D D D l = REP) 


6 


DDDDDDDDD (0 = DXQDD1 = DD) 


15:07 


Reserved 


31:16:00 


D D D D D 


63:32:00 


Reserved 
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DDDDDDDD DD 



□ 1: Exit Reason 30 Q Q Q Q Exit qualification 



DDDDDDDD Exit DDDDDDDDDDDD DDDDDDDD VMExit Reason 48DDDDD 3 0 D 
DDDDDDDDDDDDDDDDDDD Exit qualification DDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDVODDDDDDDDDD 
D D string D D (IN/OUT) D D D EAXQ DDDDDDDD DstringD D (INS/INSB/INSW/INSD/OUTS/ 
OUTSB/OUTSW/OUTSD) D D D ES:ESI DDDDDDDDDDDDDDDDDDDDDDDDDDD D 
D D D D D 

D D D D D Exit qualification DDDD 4 D D D string DDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDD /D DDDDDDDDDDDDDDDDDDDDD 

VT-x DDDDDDDDDDD l/ODDDDDDDDD (□□□□□□□□ 
DDDD) 

VT-x DDDDDDDDDDD I/ODDDDDDDDDDDDDDDDDDDDDD (D DDDDDDDD) 
DDDDDDDDDDDDDDD (EPT) DD 2DDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDD 

DDDDDDDDDDDDDDDDDDDDDDI/ODDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
D 0D D D D D 

DDDDDDDDDDDDDDDDDDDDDD DDDD VMCS D VM-Execution Control Fields D Ex- 
ception Bitmap D 14bit D (page fault exception) DDDDDDDDDDDDDDDDDD VM ExitReason 
0 (Exception or non-maskable interrupt) DDDDDDDD VMExit DDDDDDDDDDDDDDD Exit 
DDD ODDDDDDDDDDDDD VMCS D VM-Exit fnformation Fields D D D VM-exit interruption 
information D D D D D D (D 2)0 



DDDDDDDD DD 

7:00 DDDDDDDDD 

10:08 DDDDDDD (0=DDDDDDD2 = NMIQ 3=D DDDDDDDD6=DDDDDDDD) 

11 Error code DDD 

5 



DDDDDDDD DD 



12 IRET D D D NMI D D D D D D 

30:13:00 Reserved 

31 VM-exit interruption information Q Q Q 



Q 2: VM-exit interruption information 



DDDDDDDDDDDDDDDDDDDDDD D 14 (#PF DD)DDDDDDDDDDDDD 3(DD 
DDDDDD)DD VM-exit interruption information DDDDDDDDDDDDDDDDDDDDDDD 
VMExit DDDDDDDDDDDDDDD Exit qualification DDDDDDDDDDDDDDDDDDDDD 
D D D D VMExit DDDDDDDDDDDDD CR2QDDDDD (DDDDDDDDDDDDDDDDDD 
DDD)DDDDDDDD 

DDDDDDDDDDDDD I/O □□□□□□ □ DDDDDDDDDDDDI/ODDDDDDDDDD DD 
Exit qualification DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDD VT-x DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDD 

1- DDDDDDDDDDDDD MP* 2 D VMCS D Guest-State Area Q RIP DDDDDDDDD 

2. DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

3. DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

4. 3DDDDDDDDDDDDDDDDDDDDDDDDDDDD 

DDDDDDDDDDD I/O D D D D D 1DDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
D D D 

DDDDDDDDDDDD I/O D D D D I/O DDDDDDDDDDDDDDDDDDDD 

VT-x DDDDDDDDDDD I/O □ DDDDDDDD (EPT D D D ) 

EPT DDDDDDDDDDDDD I/O DDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDD VMExit reason 48 (EPT violation) Q VMExit DDDDDDDDDDDDDD 
D D D EPT DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD Read access Q q 
D D Write access DDDDDDDD OQDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDD VMExit DDDDDDDDDDDDD VMExit DDDDDDDDDDDDDDDD 
Exit QDD 48 DDDDDDDDDDDDD VMCS D VM-Exit Information Fields Q DD Guest-physical 



RIP □□□□□□□□□□□□□□□□□□□□ 32bit □□□□□ EIP □□□□□□□ 
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address DDDDDDDDDDDDDDDD VMExit Reason 48DDDDDDDDDD (DDDDDD I/O) 
DDDDDDDDDDVM Exit qualification DDDDDDDDDDDDDDDDD (read ODD write) D D 
DDDDDDDDDDDDDI/ODDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDD (D 3)D 



DDDDDDDD DD 



0 EPT violation D D D D data read 

1 EPT violation D D D D data write 

2 EPT violation D D D D instruction fetch 

3 DDDDDDDDDDDDDDD EPT D D D D D read access D D 
D D Exit qualification Q ODDDDDD AND 

4 DDDDDDDDDDDDDDD EPT D D D D D write access q D 

D D Exit qualification 0 1DDDDDD AND 

5 DDDDDDDDDDDDDDD EPT D D D D D execute access D D 
D D Exit qualification Q 2QDDDDD AND 

6 Reserved 

7 VMCS D VM-Exit Information Fields D Guest-linear address ODD 

8 1 = EPT violation 0000000000000000000000 

0 = EPT violation D D 0 D EPT 0000000000 EPT 000000000000000 

11:09 Reserved 

12 IRET 0 0 0 NMI DDDDDD 

63:13:00 Reserved 

0 3: Exit Reason 48 0 D 0 D Exit qualification 



DDDDDDDDDDDDDDDDD VT-x D0D0DDDDDDDDD0D0D0D0D0D0D0DDD 
D000D000D000D00D0 Exit 00000000000000000000000000000 
0000000000000000 I/O 0000000000000 EPT 000000000000000 
DDDDDDDDDDDDDDDDD* 3 



ept □□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□ i/o □□□□□□□□□□ 
□□□□□□□□□□a 
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Local APIC D D D 



Pentium Pro ODD Intel Q CPU Q Q Local APIC DDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDD Local APIC DDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDD EOI DDDDDDDDDDDDDDDDDDDD DD OS(D 
D D Windows XP) DDDDDDDDDD DDDDDDD TPR D DDDDDDDDDDDDDDDDDDD 
D D D D D Local APIC DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

DDD OS DDDDDDDDDDDDDDDDDDDDDDDDD VMExit DDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDD Local APIC DDDDDDDDDDDDDDDDDDDDD 
DDD 

APIC access VMExit 

VT-x D D APIC access VMExit D D D D D Local APIC DDDDDDDDDDDDD Exit DDDDDDD 
DDDDDDDDDDDDDDDDDD Local APIC DDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDD 

APIC access VMExit D D D D D D VMCS D VM- Execution fields D Virtualize APIC accesses D D D D 
DDDDDDDDDD EPT DDDDDDD Local APIC DDDDDDDDDDDDDDDDDDDD (APIC 
access page DDD)DDDDDD VMCS D VM-Execution fields DDDDDDDDDDDDD APIC access 
page DDDDDDDDDDDDD VMExit reason 44 (APIC access) DDDDDDDDDDDDDDDDDD 
VM Exit qualification DDDDDD (D 4)Q DDDDDDDDDDDDDDDDDDD (read D D D D D 
write DDDDD)DDDDDDD 



DDDDDDDD DD 

1L00 DDDDDDDDDDDD (APIC page D D D D D D D D ) 

15:12 DDDDDDD (readD writeD execute D D ) 

63:16:00 Reserved 



0 4: Exit Reason 44 0 D D D Exit qualification 



DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD EOI DDDDDDDDD 
D write onlyQ OQDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDD 
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D D D APIC access page DDDDDDDDDDD I/O DDDDDDDDDDDDDDDDDDD EPT 
Violation DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD EPT 
Violation DDDDDDDDDDDDDDDD 

TPR shadow 

DDDDDDDDDD I/ODDDDDDDDDDD TPR DDDDDDDDDDDDDDD VMExit D D D 
D D D D D D TPRQ DDDDDDDDD VMExit DDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDOSDDDDDDDDDDDD 
DDDDDDDD VMExit DDDDDDDDDDDDDDD 

DDDDDDDDDDDDDDDD VT-x D D TPR shadow DDDDDDDDDDDDDD TPR shadow 
D D D D D D VMCS D VM-Execution fields D TPR shadow D D D D D D Virtual APIC Page D D D D D 
D D D D D D TPR DDDDDDDDDDDDDDDD VMExit DDDDDDDDDDD TPR threshold Q 
DDDDDDDDDDDDDD 

D D D D D TPR DDDDDDDDDDDDD TPR D D D TPR threshold D D D D D VMExit Reason 43 
TPR below threshold Q VMExit DDDDDDDDDDDDDD VMExit D D D Virtual APIC Page Q 
D D D TPR D DDDDDDDDDDDDD 

APIC-Register virtualization 

TPR shadow DDDDDDDD Virtual APIC Page D D D D Local APIC DDDDDDDDDDDDD D 
D D Intel CPU DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD VMExit D D 
DDDDDDDDDDDDDDDDDDDDD 

DDDDDDDDD VT-xD DDDDDDDDDDD CPU DDDDDDDDDDDDDDDDDDDDDDD 
D D D CPU DDDDDDDDDDDDDDDDD 

DDD 

DDDDDDDDDDDDDDD Intel VT-x DDDDDDDD I/O DDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

D □ □ D D 

Copyright (c) 2014 Takuya ASADA. DDDDDDDDDDDDDDDDDDDDD DD - D D 4.0 DDD 
DDDDDDDDDDDDDDDD 
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